WordPress Plugin WordPrezi 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-14975

Name of the Vulnerable Software and Affected Versions Logo Slider WordPress plugin versions prior to 3.6.0 Description The issue is related to the Logo Slider WordPress plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post where the...

WordPress plugin Leaflet Maps Marker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2022-4677: Undefined Security Weakness

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

WordPress Plugin Gallery Factory Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-15987

Name of the Vulnerable Software and Affected Versions ResponsiveVoice Text To Speech WordPress plugin versions prior to 1.7.7 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape so...

PT-2023-15646

Name of the Vulnerable Software and Affected Versions WP-ShowHide WordPress plugin versions prior to 1.05 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. This is d...

PT-2023-16042

Name of the Vulnerable Software and Affected Versions Vimeo Video Autoplay Automute WordPress plugin version 1.0 Description The issue concerns a lack of validation and escaping of certain shortcode attributes in the Vimeo Video Autoplay Automute WordPress plugin. This could allow users with the...

CVE-2023-0171: Undefined Security Weakness

The jQuery T- Countdown Widget WordPress plugin before 2.3.24 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2022-4824: Improper Neutralization of Input During Web Page Generation

The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

WordPress plugin My YouTube Channel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-15635

Name of the Vulnerable Software and Affected Versions WP Blog and Widgets WordPress plugin versions prior to 2.3.1 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins...

WordPress Plugin Page View Count 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-14992

Name of the Vulnerable Software and Affected Versions PDF.js Viewer WordPress plugin versions prior to 2.1.8 Description The issue arises from the PDF.js Viewer WordPress plugin not validating and escaping some of its shortcode attributes before outputting them back in a page or post where the...

PT-2023-16035

Name of the Vulnerable Software and Affected Versions Naver Map WordPress plugin versions prior to 1.1.1 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape some of its shortcode...

PT-2023-16056

Name of the Vulnerable Software and Affected Versions Html5 Audio Player WordPress plugin versions prior to 2.1.12 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

WordPress Plugin ExactMetrics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2022-4825: Undefined Security Weakness

The WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...

CVE-2022-4756: Undefined Security Weakness

The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2023-0178: Undefined Security Weakness

The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...